CVE-2008-7147

2022-10-0316:13:53

mitre

www.cve.org

cve-2008-7147

cross-site scripting

intralearn software

html injection

remote attackers

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

50.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in IntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allow remote attackers to inject arbitrary web script or HTML via the (1) outline and (2) course parameters to library/description_link.cfm, or the (3) records_to_display and (4) the_start parameters to library/courses_catalog.cfm.

References

osvdb.org/42988

osvdb.org/42989

osvdb.org/ref/42/intralearn-21-multiple.txt